Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-33811 (GCVE-0-2026-33811)
Vulnerability from cvelistv5 – Published: 2026-05-07 19:41 – Updated: 2026-08-24 12:06
VLAI
EPSS
VEX
Title
Crash when handling long CNAME response in net
Summary
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-08 14:25 UTC
Assigner
References
101 references
Impacted products
185 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | net |
Affected:
0 , < 1.25.10
(semver)
Affected: 1.26.0-0 , < 1.26.3 (semver) |
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-19 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.6-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.10-7.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.6.17-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.17-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:3.7.1-5.el10_2.6 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.10-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:0.11-1.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-8.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260709093628.afee755d , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.4.1-12.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.2.11-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:3.7.1-4.el9_8.2 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:1.32.0-6.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:3.3.23-22.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1786380082 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418851 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.4 |
Unaffected:
1782408807 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 |
Unaffected:
1784747813 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.5 |
Unaffected:
1786645248 , < *
(rpm)
cpe:/a:redhat:logging:6.5::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1784915379 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911941 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911945 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911975 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911973 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911984 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786907276 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783985999 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784306906 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1784127491 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784727697 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784728036 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1786908301 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1783357116 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1783357140 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1783352589 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1783962464 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783914276 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.1 |
Unaffected:
1785171639 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.1::el9 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 |
Unaffected:
1784211378 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.2::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783544461 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783946386 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1786490745 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.2 |
Unaffected:
1786525840 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786573075 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786526139 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704547 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1782292352 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.2 |
Unaffected:
1782383826 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.20::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.21 |
Unaffected:
1782910941 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.21::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222217 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782223341 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782296193 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222607 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222163 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782223138 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222394 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222451 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782226178 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224487 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782303211 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224541 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782223045 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222366 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782310747 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222038 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.12 |
Unaffected:
1785202723 , < *
(rpm)
cpe:/a:redhat:workload_availability_nhc:0.12::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.13 |
Unaffected:
1785203036 , < *
(rpm)
cpe:/a:redhat:workload_availability_snr:0.13::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.3 |
Unaffected:
1785203474 , < *
(rpm)
cpe:/a:redhat:workload_availability_sbr:0.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.7 |
Unaffected:
1785203508 , < *
(rpm)
cpe:/a:redhat:workload_availability_mdr:0.7::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.8 |
Unaffected:
1785203079 , < *
(rpm)
cpe:/a:redhat:workload_availability_far:0.8::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 5.7 |
Unaffected:
1785202847 , < *
(rpm)
cpe:/a:redhat:workload_availability_nmo:5.7::el9 |
||
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1785923308 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1785929994 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1784295767 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Multicluster Global Hub |
cpe:/a:redhat:multicluster_globalhub
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat AMQ Clients |
cpe:/a:redhat:amq_clients:2023
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat build of Apicurio Registry 2 |
cpe:/a:redhat:service_registry:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-33811",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-08T14:25:39.702568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-08T14:25:43.896Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.10-7.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.17-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.17-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-5.el10_2.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.10-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11-1.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-8.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260709093628.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.1-12.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "oci-seccomp-bpf-hook",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.2.11-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-4.el9_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.32.0-6.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.23-22.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786380082",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782408807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747813",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.5::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786645248",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784915379",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911975",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786907276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783985999",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784306906",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127491",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel8",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784727697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel9",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784728036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786908301",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357140",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783962464",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783914276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785171639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784211378",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kueue-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783544461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783946386",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786490745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786525840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786573075",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786526139",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704547",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782292352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383826",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782910941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222217",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223341",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782296193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222607",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222163",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223138",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222394",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222451",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782226178",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224487",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782303211",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224541",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223045",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782310747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222038",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0.12::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_snr:0.13::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/self-node-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_sbr:0.3::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/storage-based-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203474",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0.8::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203079",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nmo:5.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-maintenance-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 5.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785923308",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785929994",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784295767",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/far-operator-0-8",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/mdr-operator-0-7",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/nhc-operator-0-12",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "python39-qpid-proton",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-rhel8-operator",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-rhel9-operator",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-operator-bundle",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "gpsd",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "oci-seccomp-bpf-hook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-package-manager",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8/golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "gpsd-minimal",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-codeflare-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-feast-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mm-rest-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-node",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel7",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "ocs4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-qpid-apache",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-qpid-apache",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "affected",
"packageName": "qpid-proton",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "qpid-proton",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "skupper-router",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "affected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-07T19:41:19.285Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1341",
"description": "Multiple Releases of Same Resource or Handle",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-24T12:06:50.538Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"name": "RHBZ#2467822",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50336"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39272"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39266"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36776"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36617"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33120"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51341"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54500: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"lang": "en",
"value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:42852: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"lang": "en",
"value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
},
{
"lang": "en",
"value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit for Containers 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54584: Red Hat OpenShift Container Platform 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:35995: Red Hat OpenShift GitOps 1.21"
},
{
"lang": "en",
"value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
},
{
"lang": "en",
"value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
},
{
"lang": "en",
"value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
},
{
"lang": "en",
"value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
},
{
"lang": "en",
"value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
},
{
"lang": "en",
"value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
},
{
"lang": "en",
"value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1"
},
{
"lang": "en",
"value": "RHSA-2026:51341: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:51194: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-07T20:01:34.913Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-07T19:41:19.285Z",
"value": "Made public."
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net",
"product": "net",
"programRoutines": [
{
"name": "cgoResSearch"
},
{
"name": "LookupCNAME"
},
{
"name": "Resolver.LookupCNAME"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.10",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.3",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "hamayanhamayan"
}
],
"descriptions": [
{
"lang": "en",
"value": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-415: Double Free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-07T19:41:19.285Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/issue/78803"
},
{
"url": "https://go.dev/cl/767860"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"title": "Crash when handling long CNAME response in net"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-33811",
"datePublished": "2026-05-07T19:41:19.285Z",
"dateReserved": "2026-03-23T20:35:32.814Z",
"dateUpdated": "2026-08-24T12:06:50.538Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-33811",
"date": "2026-08-24",
"epss": "0.00813",
"percentile": "0.54243"
},
"microsoft_vex": {
"current_release_date": "2026-06-09T01:42:02.000Z",
"cve": "CVE-2026-33811",
"id": "msrc_CVE-2026-33811",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:known_affected": "2",
"product_status:known_not_affected": "4",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Crash when handling long CNAME response in net",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33811.json",
"version": "6"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-33811\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-07T20:16:42.770\",\"lastModified\":\"2026-08-24T13:18:11.860\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"net\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net\",\"programRoutines\":[{\"name\":\"cgoResSearch\"},{\"name\":\"LookupCNAME\"},{\"name\":\"Resolver.LookupCNAME\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.6-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.10-7.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.6.17-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.17-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:3.7.1-5.el10_2.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.10-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:0.11-1.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-8.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260709093628.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:3.4.1-12.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oci-seccomp-bpf-hook\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.2.11-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:3.7.1-4.el9_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:1.32.0-6.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:3.3.23-22.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1786380082\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782408807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747813\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.5::el9\"],\"versions\":[{\"version\":\"1786645248\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784915379\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911975\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786907276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783985999\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784306906\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1784127491\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel8\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784727697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel9\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784728036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1786908301\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1783357116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1783357140\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1783962464\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783914276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"],\"versions\":[{\"version\":\"1785171639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"],\"versions\":[{\"version\":\"1784211378\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783544461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783946386\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1786490745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1786525840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786573075\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786526139\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704547\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1782292352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.20::el9\"],\"versions\":[{\"version\":\"1782383826\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.21::el9\"],\"versions\":[{\"version\":\"1782910941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222217\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782223341\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782296193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222607\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222163\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782223138\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222394\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222451\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782226178\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224487\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782303211\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224541\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782223045\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782310747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222038\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"],\"versions\":[{\"version\":\"1785202723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/self-node-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"],\"versions\":[{\"version\":\"1785203036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/storage-based-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"],\"versions\":[{\"version\":\"1785203474\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"],\"versions\":[{\"version\":\"1785203508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0.8::el9\"],\"versions\":[{\"version\":\"1785203079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 5.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-maintenance-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"],\"versions\":[{\"version\":\"1785202847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1785923308\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1785929994\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1784295767\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/far-operator-0-8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/mdr-operator-0-7\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/nhc-operator-0-12\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python39-qpid-proton\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gpsd\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"oci-seccomp-bpf-hook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-package-manager\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8/golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gpsd-minimal\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-codeflare-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-feast-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kuberay-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-k8s-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-gc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-processor-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mm-rest-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-runtime-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-serving-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhaii-cluster-validator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trustyai-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-node\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel7\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocs4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-qpid-apache\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-qpid-apache\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-router\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-08T14:25:39.702568Z\",\"id\":\"CVE-2026-33811\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1341\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.25.10\",\"matchCriteriaId\":\"1C966EF3-C51C-4239-B5FC-C44A5202FEC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.3\",\"matchCriteriaId\":\"522E4CD0-2B99-4363-9C78-0BAFD988A2D6\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/767860\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78803\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4981\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33120\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35993\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35994\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36617\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36625\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36776\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39266\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42048\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42852\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50205\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50300\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50336\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50843\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51057\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51341\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54274\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54283\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54284\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54285\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54286\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54552\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54602\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54603\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56340\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-33811\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2467822\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-24T11:47:17+00:00",
"cve": "CVE-2026-33811",
"id": "CVE-2026-33811",
"initial_release_date": "2026-05-07T19:41:19.285000+00:00",
"product_status:fixed": "913",
"product_status:known_affected": "194",
"product_status:known_not_affected": "4084",
"product_status:under_investigation": "5",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.10-7.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.17-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.17-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-5.el10_2.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.10-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11-1.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-8.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260709093628.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.1-12.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.2.11-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oci-seccomp-bpf-hook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-4.el9_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.32.0-6.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-tools\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.23-22.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786380082\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782408807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747813\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786645248\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784915379\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911975\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786907276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783985999\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784306906\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127491\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784727697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784728036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786908301\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357140\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783962464\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783914276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785171639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784211378\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783544461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kueue-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783946386\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-training-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786490745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786525840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786573075\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786526139\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704547\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782292352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383826\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782910941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222217\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223341\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782296193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222607\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222163\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223138\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222394\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222451\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782226178\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224487\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782303211\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224541\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223045\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782310747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222038\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/self-node-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203474\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/storage-based-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/machine-deletion-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/fence-agents-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 5.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-maintenance-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785923308\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785929994\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784295767\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"redhat-user-workloads/far-operator-0-8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"redhat-user-workloads/mdr-operator-0-7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"redhat-user-workloads/nhc-operator-0-12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"python39-qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"apicurio/apicurio-registry-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"apicurio/apicurio-registry-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/snmp-notifier-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/snmp-notifier-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gpsd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"oci-seccomp-bpf-hook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"yggdrasil-worker-package-manager\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"go-toolset:rhel8/golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gpsd-minimal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-codeflare-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feast-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kuberay-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-k8s-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-gc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-processor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mm-rest-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-runtime-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-serving-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhaii-cluster-validator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-node\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"ocs4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-qpid-apache\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-qpid-apache\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-router\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-07T20:01:34.913Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-07T19:41:19.285Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54500: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50843: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42852: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit for Containers 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54584: Red Hat OpenShift Container Platform 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35994: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35995: Red Hat OpenShift GitOps 1.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35993: Red Hat OpenShift GitOps 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51341: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51194: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42048: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41055: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-07T19:41:19.285Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-33811\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2467822\", \"name\": \"RHBZ#2467822\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54552\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50336\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39266\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36776\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36617\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56340\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50843\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42852\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51057\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36625\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50300\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54603\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54602\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54584\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35994\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35993\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33120\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54284\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54285\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51341\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42048\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1341\", \"description\": \"Multiple Releases of Same Resource or Handle\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-24T12:06:50.538Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33811\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-08T14:25:39.702568Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-08T14:25:36.174Z\"}}], \"cna\": {\"title\": \"Crash when handling long CNAME response in net\", \"credits\": [{\"lang\": \"en\", \"value\": \"hamayanhamayan\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"net\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.10\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.3\", \"versionType\": \"semver\"}], \"packageName\": \"net\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"cgoResSearch\"}, {\"name\": \"LookupCNAME\"}, {\"name\": \"Resolver.LookupCNAME\"}]}], \"references\": [{\"url\": \"https://go.dev/issue/78803\"}, {\"url\": \"https://go.dev/cl/767860\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4981\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-415: Double Free\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-05-07T19:41:19.285Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-33811\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-24T12:06:50.538Z\", \"dateReserved\": \"2026-03-23T20:35:32.814Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-07T19:41:19.285Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:35993
Vulnerability from csaf_redhat - Published: 2026-07-06 15:19 - Updated: 2026-08-24 11:57Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.5 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.20.5 security update
Details: An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-9568 (GitOps operator propagates argo CD tracking annotations to dynamic roleBindings)
* GITOPS-9971 ([Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL )
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x | — |
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.20.5 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-9568 (GitOps operator propagates argo CD tracking annotations to dynamic roleBindings)\n* GITOPS-9971 ([Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL )",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:35993",
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35993.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.5 security update",
"tracking": {
"current_release_date": "2026-08-24T11:57:21+00:00",
"generator": {
"date": "2026-08-24T11:57:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:35993",
"initial_release_date": "2026-07-06T15:19:07+00:00",
"revision_history": [
{
"date": "2026-07-06T15:19:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T11:57:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.2",
"product": {
"name": "Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.20::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Abad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782384460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782385139"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3A3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782384202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782384503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782383838"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782384538"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3Aacabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782383826"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782383824"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3A762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782384102"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3A5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1782446706"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Afae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782387394"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Aa087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782384460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782385139"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3Afbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782384202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Abc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782384503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782383838"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782384538"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3Ab6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782383826"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3Ad830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782383824"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3Af3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782384102"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782387394"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Af85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782384460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782385139"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3Acc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782384202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Ac5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782384503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782383838"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782384538"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782383826"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782383824"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3A284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782384102"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ae4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782387394"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782384460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ac826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782385139"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3Aef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782384202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Aade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782384503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782383838"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782384538"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782383826"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782383824"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3A4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782384102"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Afd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782387394"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64 as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x as a component of Red Hat OpenShift GitOps 1.2",
"product_id": "Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T15:19:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T15:19:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d_s390x",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac_arm64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84_ppc64le",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce_amd64",
"Red Hat OpenShift GitOps 1.2:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:35994
Vulnerability from csaf_redhat - Published: 2026-07-06 15:19 - Updated: 2026-08-24 11:57Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.5 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.19.5 security update
Details: An update is now available for Red Hat OpenShift GitOps.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x | — |
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.19.5 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:35994",
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35994.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.5 security update",
"tracking": {
"current_release_date": "2026-08-24T11:57:21+00:00",
"generator": {
"date": "2026-08-24T11:57:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:35994",
"initial_release_date": "2026-07-06T15:19:12+00:00",
"revision_history": [
{
"date": "2026-07-06T15:19:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T11:57:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.19",
"product": {
"name": "Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.19::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1782291525"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Aa8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1782292031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1782293105"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1782290950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1782291351"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782290387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1782290215"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1782292352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Aa66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1782291052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Af38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1782290000"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3A22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1782313555"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3Ab8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1782291973"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1782291525"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Ab69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1782292031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1782293105"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1782290950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1782291351"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ac5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782290387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Abc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1782290215"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1782292352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1782291052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Af324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1782290000"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1782291973"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1782291525"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1782292031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Ab3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1782293105"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1782290950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1782291351"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782290387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1782290215"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1782292352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1782291052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Ae106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1782290000"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1782291973"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1782291525"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Ad34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1782292031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1782293105"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Ae424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1782290950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3Ad35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1782291351"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782290387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ae21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1782290215"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1782292352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1782291052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Afbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1782290000"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3Abf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1782291973"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T15:19:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T15:19:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:142f81e07068cb43fa22b798e3fd1f1cd0b54f2820bf8008f1c61114632be9a9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2b3f86ba682cce1753ca2abc3538c330ec78026863ace0a7303fb36f8530a09a_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:77341d5f25030515eed25537d224c4a8701322a58db9181cdfc925d4cab28eca_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8cf8a6ae5212d2206bfca8033862a4fd812e41bd6683696a3f2c974a9fb5dd56_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:11d452ecde021dd5bcf0aa79c01c49074c0fcaa4561f71b1e71f940f99b6fc77_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:392359aa59f69afe8860a82a951659990437548916f92c97f4ec4cdaded2d0b0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:86e42d5047b3dfe9be543c43f06d9fc5c8d8ecaa2529b58ad47f30be9a4cd77f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3cf24392920aaa725f287938d5e77d1525825d49ebd05b2ed3c7c0d4ed7a823_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:06a57559d48b63dcb7e0b939f9c9303aa5a3f5c32616c47c48c8161da5d8b530_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3f6492a7edfdaa1282837277a83e4c247f4b689a9f9ac16766b3b0d8415330b1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:786fcd7035e4e59926bb74ffa23628cd8c328b1eb890cd948fee216e563a272c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:e424fd18276656ca4f7a29f3ca7c4184f51655c22d8136fbac49195201271a9e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:1318ceaefef8c5e2ce3f7ae04e938a4458a5c0120eb77b7628ebbd1770edbd67_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2046a561a59f47f856e40e138561586978d1d473a3fcd6eaea95fbca5d62eb66_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8312842c2ae5637a43b3c1a933d47d148cd2ea2544978e55d9640d59523174b1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d35ec5054ec806575e13854da072a39e47ed431260002f8ce2eaa09c67e454d0_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3061b1d84759aa1c46379875593b0503a961930f9b18a5566866dd533cb5157e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a8b1fad3743f82ff1df3b6daed36096eabd827070b9426a76cb2bffa73d23f8e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:b69311dff750e993a9b4b0bdc5756012f32c0a644e8bac213267b6729addbf3c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d34b5b4cb79db418674b9210036d6acb12a35abb894e58ac56ac49e2dabbd7c3_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13007a387398626756a013d64b64f941e548b9207fba487f1f2110c6ef7a2143_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:909e2f26afee68521775cf31d13dfaa3d16fdf736f7e7097aba987e15bba4183_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9553897b4c43a1df0e15339cdb1a953d72963c400f47572fb04555ec49b5ad44_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5317561de5e3c65588016e320afdcc9d1a8ae9a27a8f64fe03bf62e2e6914bf_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:554da1fb02ef3e4870cac383b50d2ab0374a9d8c42827cb909ca17121cd2d674_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:840cddc6e9803845f8216c670e251f3e412cecbdef40d543dabcee0e4d83bf4d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bc53ecb8ce0ab3d2a955c21f9e0b84b55e7d297f77b2ead6a71f3f7f58670691_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:e21cad6af52b3ca67013d723df4a5b1b7e63044e83a5402b2fb365eeb5978635_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1186f9afe02ad55310874f86544e7c966a4e3eddcab664ec363030ac4b6fed4f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3713138e73d479f2532f5380b065af0379d236596455448dbe8a1a17bc5780d2_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:480a339ce9d622d6371d4ef75f4ddf7840a2dda6d512496eaf6d930654ffb58a_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:6ffae033f5816f4448fb9bbc79359a1319251e5c1baab2bb9fdd60289ba542b8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:22419f173ef1d31a83d226bc3b23fb283db62a9693c8f1df0a5e2fb4b3b38df4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e106c87be2d6834217435a7583b40c3bc1a9ab92624cd1ad4219913cfe4b6463_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f324070b67fe44e3f4d7862f10fbcafb4dcabcfa4beb8b5e4ffe062800ab5989_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f38c4f32c9c4eaa50ae99b8cb38e58aaf0c0c7eaa8275e211b3f81b023ddc0c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:fbe2b3bb5242f2d118d60dcd449858e7968d9eaff8c5ba5efcb2b36201ce8e0a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:2513bd207d6ef60f16637b9a18dce2437844703afde603becdc50113823d8728_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:4c81a4f0d5a90edfc1da474af937e8c276579f0e1a87c77b93352f2ee7550eac_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:940596cd69f441ccd2dc6aedf77e0cdac328a55532734304703429e78f80f206_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a66508fb7b17486246be16bf381f0c629993482a7858f0b5f9ae2b2340d02ea1_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1afe78f60cfeb8380eb63eae988b34354cd1de47dd07cf69defd272292e296db_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6fd7d8c42604912b271d672b159c7b5d43955d19afdbaa2b95f11fce589ce9da_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b8c045203993fbb2e653c8bb8453254b1d9383827337e1148cf99f1aef00cf6e_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:bf83003061015154a7bf8c0a56c1ab639ae725bc7985ee296c341530dfd81650_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:35995
Vulnerability from csaf_redhat - Published: 2026-07-06 15:19 - Updated: 2026-08-24 11:57Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.21.1 security update
Details: An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-10083 (RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI)
* GITOPS-10178 (OpenShift GitOps operator v1.21.0 breaks Redis-HA replication when upgrading from v1.20.4)
* GITOPS-10273 (GitOps Operator metrics alert after upgrade: ServiceMonitor expects HTTPS but metrics endpoint serves HTTP on port 8443)
* GITOPS-9971 ([Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL )
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
13 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.21.1 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-10083 (RC 1.21.0-7: Missing permission for web-based terminal in Argocd \u00a0UI)\n* GITOPS-10178 (OpenShift GitOps operator v1.21.0 breaks Redis-HA replication when upgrading from v1.20.4)\n* GITOPS-10273 (GitOps Operator metrics alert after upgrade: ServiceMonitor expects HTTPS but metrics endpoint serves HTTP on port 8443)\n* GITOPS-9971 ([Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL )",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:35995",
"url": "https://access.redhat.com/errata/RHSA-2026:35995"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35995.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update",
"tracking": {
"current_release_date": "2026-08-24T11:57:21+00:00",
"generator": {
"date": "2026-08-24T11:57:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:35995",
"initial_release_date": "2026-07-06T15:19:09+00:00",
"revision_history": [
{
"date": "2026-07-06T15:19:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T11:57:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.21",
"product": {
"name": "Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782910174"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782911337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3Aebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782911311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Aea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782910760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782910358"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782911414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782910941"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3Ab2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782911878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3Ad1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782911075"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3A43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1782914894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Af52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782910161"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782910174"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ab7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782911337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3A9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782911311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Abc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782910760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3Ae2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782910358"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782911414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782910941"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3Aa0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782911878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3A34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782911075"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ae5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782910161"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782910174"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782911337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3Af7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782911311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782910760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782910358"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782911414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782910941"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782911878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3Aa6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782911075"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Afa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782910161"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1782910174"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1782911337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3A9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1782911311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1782910760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1782910358"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1782911414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1782910941"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3Ab6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1782911878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3Aebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1782911075"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1782910161"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T15:19:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:35995"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:31df9ed78ef673c141f895b5da9fc88ed390d9cd025b1a42c7ce6d483ea827f0_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:66f7b0cae096b5062eff698c507fd25cf0718a434cdfd56851c7ee844de3f361_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:78c4eaef53bfe440e55df7dc0d05ef1287027232d833c3f138464af9b91f6142_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:93e97ca5581d02b0de8cdc36474be8cb7cec66451995e7c4b2d502105e91647b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9afbe63f4517ebfbd9208dcca961ff70889e4d1567465e0cdd77c66fb8ee10b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b7c41fc354b824f832ece7d9bf75080cd79170f7bfff6adeda81fc4d12a8021_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ebd165eddcb23a4dbb10839e45702b4f35a163dab163e81fd6e6b6f6c9b4d688_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f7400956c57376901995ee80dd360aaf3bfc72c3ed0182e155af9d926bf33f05_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2de4f9045e40718b6243ca2d19964c9e300d2fc5e6f73d98b2d326a68f2ba701_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4507a756880f88e7c59552dd035ee3ccab7491596c5644a594a1b02d1b6d6ff8_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc170d2092e96f2ac974d4825a009cd1425478b035f51671d257be731821dc67_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ea80f43122a94d8999f865bc094faea29d10d8fcec213f6946c794c35ad6496e_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:23490cf4c16b8fe704e1491f1a3c91058a431655d3919dc2ae628393b2237d35_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:78be21366d4a67ae22242a9a3e996bf57581311bd52a8a40210504b5c961afc1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8a5aea72d9d5e325c07bf42b335b3a9fb7e330c93bd0accf7adbc4fde1fa0f3f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2a14e735bcdf78358063ae3427e5c527888628252d999c98eac8b026dd584da_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2c9f4259f578aa7908a1e78018bc7f4c13d3db191a9b0fe0c17473d026662d96_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:63a9dbce99c6324d926f0ca75f6f6110a7d18cb9076a9a628b08aaa35d2b36d5_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9ffea8bd1cec5f6667b7af31f33c94f40413431c5b3d6918e5db628751ea6ec9_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b7415899816317141f2776ddc39d5e9aba914e82af7120c9d9cdd562f6c2dbe6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:056a29a0bf815d8a3525597b7ac6458077f28596704ead6238a6e4f4e18ca5d4_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:38d0b6127b62d08834018556ab9d36d7938f273f10bd0e618d1bc6db555922c1_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ea9fc9b41065159786052de33a7144c7508a3a3945431e3465e614e8e8a838d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9ce6b4b8884db21d040222b2d2316ed5afdfab032e3f39af85071e103ad27e87_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e13472d3cc29e80fbc2d517e1605dc670ea2b32e93f9e5e633e572ad534638f_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:343f88458f9a5c92d71b3ef79645126feac8b9979dfa1c0cc95eaa0fb3e2b5a8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3b9992666638d4a3a66f635be54e576420b7c5bf73c6ee5a45a6fe8f9ed94531_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e0cf94f5e0e4cdbbde4d44a37693625c804f81518ffa342b5223ddd0ebb03b0_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:43e18d5224a339cb688dfc50b733b7fb8cbdc394ba9e4eefc7988020fe75d1ca_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:34c840201213f42f42e310cf889e6bdeb76e10ac02d18bc86d97b2707b317ce7_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a6c352ac19baaac3ebe76a1a3ebbf024a6283a8a52dacc29ca287f1d4ecdbb97_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1443b6fc4be75f936c060ec1cb795ac59184936807178832bd221a08234dd32_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ebe8a468331014b469c75d41d1eea507fe2e29dfcb4f71b432b1c2358b88ee42_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:7baffc0e9bb45512eb6d95ad7d885c0ac74d3be28c0f8f24d48b5e5e11f46501_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a0b0a6e0d62761e4b7ad379961bb8ac854a1cf68771acfceb4aa2bdf07b7c0b6_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b2e1ff63531d5e04307c5f66b753af3accd70ce8b9e0438b803aa525c2c006bb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b6d45f8851b48363458e8c25a9e816ab7d81f2b2568fae587b16cafc5cfe0ea6_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:75d9535ee698cd9b3f55cd80d33a57d949df2186d19caf28427d31d75794d000_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5ed2b02712ed5ddad329df0ce1f4ee7856c09537297e68bdeb3e8b3d0f27b7e_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f52f0fa6a4c47d1256bade16066d03cb81c9eb0c01a26acfee6044017683d6eb_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fa543e276e0765cb03afb83aa37da65d7e709846606028116c2999f73ec6f5e4_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
]
}
RHSA-2026:36207
Vulnerability from csaf_redhat - Published: 2026-07-07 11:09 - Updated: 2026-08-24 19:11Summary
Red Hat Security Advisory: RHACS 4.11.1 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
23 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x | — |
Workaround
|
Threats
Impact
Important
References
109 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36207",
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9165",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.11/html-single/release_notes/index#about-this-release-4111_release-notes-411",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.11/html-single/release_notes/index#about-this-release-4111_release-notes-411"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36207.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.11.1 security and bug fix update",
"tracking": {
"current_release_date": "2026-08-24T19:11:22+00:00",
"generator": {
"date": "2026-08-24T19:11:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36207",
"initial_release_date": "2026-07-07T11:09:24+00:00",
"revision_history": [
{
"date": "2026-07-07T11:09:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T19:11:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product": {
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel9@sha256%3Aa67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel9@sha256%3A0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9\u0026tag=1782122242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel9@sha256%3A2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9\u0026tag=1782109225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel9@sha256%3A5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel9-operator@sha256%3Ab9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3A2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel9@sha256%3A93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel9@sha256%3A8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel9@sha256%3A39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel9@sha256%3A1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel9@sha256%3A207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel9@sha256%3Aee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel9@sha256%3A4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9\u0026tag=1783352589"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel9@sha256%3A70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel9@sha256%3Abc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9\u0026tag=1782122242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel9@sha256%3A1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9\u0026tag=1782109225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel9@sha256%3A41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel9-operator@sha256%3A91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel9@sha256%3Ad50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel9@sha256%3A276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel9@sha256%3Aab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel9@sha256%3A3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel9@sha256%3A3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel9@sha256%3Ab26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel9@sha256%3A06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9\u0026tag=1783352589"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel9@sha256%3A93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel9@sha256%3Af5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9\u0026tag=1782122242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel9@sha256%3A55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel9-operator@sha256%3A307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel9@sha256%3Aa8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel9@sha256%3A5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel9@sha256%3A7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel9@sha256%3A58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel9@sha256%3A242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel9@sha256%3A0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel9@sha256%3A175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9\u0026tag=1783352589"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel9@sha256%3Afd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel9@sha256%3A063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9\u0026tag=1782122242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel9@sha256%3Ad785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel9-operator@sha256%3Afbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel9@sha256%3Aeab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel9@sha256%3Abf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel9@sha256%3A69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel9@sha256%3A973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel9@sha256%3A9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9\u0026tag=1782925137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel9@sha256%3Ae7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9\u0026tag=1783352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel9@sha256%3A7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9\u0026tag=1783352589"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.11"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Moritz Clasmeier"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-9165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security is aware of this issue affecting RHACS Central. This flaw allows an authenticated user to reduce availability of the Central management component. Red Hat is not aware of malicious exploitation of this issue outside of coordinated testing. Updates addressing this issue will be released according to the RHACS support lifecycle. Refer to the associated errata when available for affected versions and update instructions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "RHBZ#2480505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165"
}
],
"release_date": "2026-07-06T08:38:30.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "There is no complete mitigation other than installing the update once\navailable.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T11:09:24+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70dbc4b2fd02c6006d01fd31277c79e1152a04e678316853cc9650004a88c8f6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:93e15662b963e2da7c1ca4ad5c47df2a49d6df5857c9cb44157c88a1eb14c99c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:a67c68062eb3fe78067524fbef175c6f4dcb2876138fbafc17c8f5aef930ffb5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:fd0e68ad1f3d790efc1a7637a63668df741a3195d86260291ca7ff85fe72bed2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:063b28090fce858259efe584b09d7329b766ae461926e8d78f6fac1cf6738055_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:0964f3f379136662c8c3817b2a7d3b787808fab2b742cd7ea53d5f6c2248d1c9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:bc05850aa1cefea5105198c9af51c64f2b255df1c1ccbb30f3c12a2d4c549f1b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:f5a7d92dc9cb85b9a4d70d871ab1748e80435e9ddba74ba3818e92ec57f7cf78_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:1ba125d01f712a5fb85db400a0cd9d2240c36529d7d0c8e925acfd3c45845bec_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:2801fe77997c4325f9d1e154eae8c63a4fc808e2c31c773a60c47d63268b1bbc_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:55d7e178435c881a57a88aa6747cd6dedd3c3a512014d0509919dceef13b2946_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:5fef4993574a20a48a9f93e5f07967d13b7b26e8f7e83e2222ea5bbe1f500409_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:d785df86cfd97ff76e6d9426b247543faa91efaeb950f6b2e6b97f9e67624043_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:2fe25a8ac9612f29a625969bb25d24938abb298e9a9e1e79fb3aa34c6a0e5f76_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:307402d2c8c46b74c1a855dad9fdd9f4013c057256513b4d1d58ac980ed8d2e0_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:91710d1c3f67e096b682cb6fa118c70d40bbbc36e3293aa3bea9890775d70236_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:b9d25811da46af4766d41e7543cc54a2820b2b9a4c190585e34166620cf070f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:fbd34cb7d74c9e699337157c4c26bc714b541e00645948cccedb5e7afb258003_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:93dc86f2358079474a9f5ce67e0e6430c2cdbe8a01155be8020165fce2e73f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:a8c0e823eb62db8ff39de33d6401670e2f65cac8e640b64a9ffeae8ecc0c12bc_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:d50e48a12a217855c373b865df663f50355e4f76fba33de65e50bdc333112c4a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:eab9c2e2d1ea614bf898c0cba75223f7960a61b7d2315815d6410e3c4f62d7f8_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:39470e0a40255d8d0bcfb6a3e82d77bfd57fdbff5452179f69eed7cff417a103_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:69531d80a6af41db1c28f54a8acfea85594fca34c754c8049e75b331e998a973_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:7a6b045c058be14ab95043bc3c6680bba5ab54a060ae45dbc7e6e8896fb093d8_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:ab57133805270163a3cb99e972b183e8613a6fbfcc943eae5b542d923d572244_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:1c03e0ce9e3b48c8c0f2a9c65dfe3d9b344cd82ac776dc210ef23b91745b0682_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:3783cfecf52a9c532c4e64ed93078581c8ca200efda661efc63ae1fac4391d57_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:58a181deb194766402e32ef43375e2e51208b229c8c97674bda5a6fcc768b8fd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:973cb71559d8d346c3e0840a6865afda1de53017dcd9f35ee0a56a1606f3149b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:276fbe3c102abbed5d2cc29b1dbf30456ab5d647fe7f157f18180cdd5ab0b431_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:5fb0bea0b4f43dce5201a986eb9bcd9aa9c2859e3d762f265e4d000a4c93474f_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:8efb0787d02e6700bee64b83c251ee11f4cdc4a04eb770cea3ba34f3d9ec94b4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel9@sha256:bf53175b6a2e11cf7f5599b65fcb4e56e4037ad5b6254c9e4fa070080aea66fc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:207a6c112b395d28579d8318d95bec18942834476574e07889ae734a4df1c4b5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:242afe8097041307445f2e9f4b8d3d674aa4ff91c6ffe884ef170b356a09fe68_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:3e0bc79f2f14f0bf95c5c5f08a7838e8c3df3df5da52182f4807b844dda8638e_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9@sha256:9823d42834e5698b968385a7ef7d5a2a2749c441d8122a895bf53d3681df6a7c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:06be3bd07a7bf44fb19a93869f6286fbdc7d8b8e7b8507e3c8ce9f8af67574f9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:175bde7c228af62b6f04799bc35a01d525a115d7decb73b2b5f90a3c8cf10a9c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:4d800957aef55f44442be2a95bd85e3098587c6b0f7455b50264993cd4a2154b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel9@sha256:7fb3f1bf0b641c2f30493fb8e10e90625f5fd30f77ed3b7dec2a98012d54bbab_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:0a23d3fe6f4f54358bef552a62b3d098a97d39b4f1c0b0c0c6d3588c85276417_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:b26fb5031c85204e1b9174c49452146d4528560de554b70e2e97eebccd610fb8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:e7d01fcd2995b921946a7842faec251ff4434bb9cda3b77e855339f2d9241471_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.11:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel9@sha256:ee31bd693543f37461982b1bbcdb783e438c3d1021875829bd24974a1d2c0ea6_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
}
]
}
RHSA-2026:36319
Vulnerability from csaf_redhat - Published: 2026-07-07 15:06 - Updated: 2026-08-24 19:11Summary
Red Hat Security Advisory: RHACS 4.9.9 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
References
154 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36319",
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9165",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36319.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.9.9 security and bug fix update",
"tracking": {
"current_release_date": "2026-08-24T19:11:22+00:00",
"generator": {
"date": "2026-08-24T19:11:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36319",
"initial_release_date": "2026-07-07T15:06:01+00:00",
"revision_history": [
{
"date": "2026-07-07T15:06:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T19:11:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security 4.9",
"product": {
"name": "Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ace31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Ac11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3A8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ad58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ad055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ac8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Aaa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ad68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ab48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aa757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Afbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Aef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aedd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Abff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Moritz Clasmeier"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-9165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security is aware of this issue affecting RHACS Central. This flaw allows an authenticated user to reduce availability of the Central management component. Red Hat is not aware of malicious exploitation of this issue outside of coordinated testing. Updates addressing this issue will be released according to the RHACS support lifecycle. Refer to the associated errata when available for affected versions and update instructions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "RHBZ#2480505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165"
}
],
"release_date": "2026-07-06T08:38:30.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "There is no complete mitigation other than installing the update once\navailable.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
}
]
}
RHSA-2026:36617
Vulnerability from csaf_redhat - Published: 2026-07-08 09:19 - Updated: 2026-08-24 11:57Summary
Red Hat Security Advisory: oci-seccomp-bpf-hook security update
Severity
Important
Notes
Topic: An update for oci-seccomp-bpf-hook is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes.
Security Fix(es):
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for oci-seccomp-bpf-hook is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes.\n\nSecurity Fix(es):\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36617",
"url": "https://access.redhat.com/errata/RHSA-2026:36617"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36617.json"
}
],
"title": "Red Hat Security Advisory: oci-seccomp-bpf-hook security update",
"tracking": {
"current_release_date": "2026-08-24T11:57:24+00:00",
"generator": {
"date": "2026-08-24T11:57:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36617",
"initial_release_date": "2026-07-08T09:19:18+00:00",
"revision_history": [
{
"date": "2026-07-08T09:19:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-08T09:19:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T11:57:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"product_id": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.11-2.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"product_id": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.11-2.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"product": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"product_id": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource@1.2.11-2.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"product": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"product_id": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo@1.2.11-2.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"product_id": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.11-2.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"product": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"product_id": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource@1.2.11-2.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"product": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"product_id": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo@1.2.11-2.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"product_id": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.11-2.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"product": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"product_id": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource@1.2.11-2.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"product": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"product_id": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo@1.2.11-2.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"product_id": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.11-2.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64",
"product": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64",
"product_id": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource@1.2.11-2.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"product": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"product_id": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo@1.2.11-2.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64"
},
"product_reference": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le"
},
"product_reference": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x"
},
"product_reference": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64"
},
"product_reference": "oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64"
},
"product_reference": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le"
},
"product_reference": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x"
},
"product_reference": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64"
},
"product_reference": "oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36617"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.11-2.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:oci-seccomp-bpf-hook-debugsource-0:1.2.11-2.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
]
}
RHSA-2026:36625
Vulnerability from csaf_redhat - Published: 2026-07-08 08:08 - Updated: 2026-08-24 19:11Summary
Red Hat Security Advisory: RHACS 4.10.5 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Vendor Fix
fix
|
Known not affected
23 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
References
145 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36625",
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46625",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9165",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4105_release-notes-410",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4105_release-notes-410"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36625.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.10.5 security and bug fix update",
"tracking": {
"current_release_date": "2026-08-24T19:11:21+00:00",
"generator": {
"date": "2026-08-24T19:11:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36625",
"initial_release_date": "2026-07-08T08:08:13+00:00",
"revision_history": [
{
"date": "2026-07-08T08:08:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T19:11:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product": {
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel8@sha256%3A41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8\u0026tag=1782356145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3Ac77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel8@sha256%3A1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8\u0026tag=1782356145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Afe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ae7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Ad048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Ac5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Af4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Ae723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Adc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Aafeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Ac8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Af8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aeba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Moritz Clasmeier"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-9165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security is aware of this issue affecting RHACS Central. This flaw allows an authenticated user to reduce availability of the Central management component. Red Hat is not aware of malicious exploitation of this issue outside of coordinated testing. Updates addressing this issue will be released according to the RHACS support lifecycle. Refer to the associated errata when available for affected versions and update instructions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "RHBZ#2480505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165"
}
],
"release_date": "2026-07-06T08:38:30.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "There is no complete mitigation other than installing the update once\navailable.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `js-cookie` JavaScript library allows for cookie attribute manipulation via prototype pollution. When applications process untrusted JSON data with affected versions of `js-cookie`, an attacker could control sensitive cookie properties such as `domain` or `secure`, potentially leading to session fixation or other client-side security bypasses.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
}
]
}
RHSA-2026:36648
Vulnerability from csaf_redhat - Published: 2026-07-08 09:20 - Updated: 2026-08-24 19:11Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.4
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.7.4
Details: Releases of Red Hat OpenShift Builds 1.7.4
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 | — |
Threats
Impact
Important
References
104 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.7.4",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.7.4",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36648",
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10840",
"url": "https://access.redhat.com/security/cve/CVE-2026-10840"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36648.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.4",
"tracking": {
"current_release_date": "2026-08-24T19:11:25+00:00",
"generator": {
"date": "2026-08-24T19:11:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36648",
"initial_release_date": "2026-07-08T09:20:18+00:00",
"revision_history": [
{
"date": "2026-07-08T09:20:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T19:11:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.7.3",
"product": {
"name": "Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.7::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783057515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Acebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783057529"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783057884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783058067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1783341609"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1783413402"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783334059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ac472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783333779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783057868"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783058284"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783057515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aa18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783057529"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783057884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Acf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783058067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1783341609"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783334059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783333779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ab2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783057868"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Abe7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783058284"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783057515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783057529"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Accf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783057884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783058067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1783341609"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783334059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Afa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783333779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Afecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783057868"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783058284"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Aaf26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783057515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783057529"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783057884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Aa80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783058067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1783341609"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783334059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783333779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Aaef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783057868"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783058284"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Christopher Lusk"
],
"organization": "North Echo Security Research"
}
],
"cve": "CVE-2026-10840",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2026-04-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants\u0027 Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the OpenShift Pipelines operator where the `tekton-scheduler-rolebinding` grants `system:authenticated` users cluster-wide write access to Kueue and cert-manager resources. This allows any authenticated user to disrupt workload scheduling, manipulate priorities, delete Workload objects, or may overwrite TLS Secrets, such as the default ingress controller certificate, by leveraging cert-manager\u0027s privileges. The vulnerable RBAC objects are deployed regardless of whether the Tekton Scheduler feature is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10840"
},
{
"category": "external",
"summary": "RHBZ#2484720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10840",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10840"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10840",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10840"
}
],
"release_date": "2026-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "If the Tekton Scheduler feature is not in use, administrators can mitigate this by patching the ClusterRoleBinding to reference a specific ServiceAccount instead of system:authenticated:\n\noc patch clusterrolebinding tekton-scheduler-rolebinding --type=merge -p \u0027{\"subjects\": [{\"kind\": \"ServiceAccount\", \"name\": \"openshift-pipelines-operator\", \"namespace\": \"openshift-operators\"}]}\u0027\n\nIMPORTANT: The OpenShift Pipelines operator\u0027s reconciliation loop may revert this manual patch. Verify that the operator does not reconcile this binding back to system:authenticated after applying the mitigation. If it does, scale down the operator deployment or configure the operator to skip reconciliation of this object.\n\nAlternatively, the ClusterRoleBinding can be deleted if the Tekton Scheduler is not enabled.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:20:18+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.3 upgrade to 1.7.4",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:09fdae42b81088e67a3f29e32ac980d57652d8ddbe9665b86aab69b37a4327bd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ef830a815d07df60291e9c7b89a03dd40c0ceabfc3071f1fe188575f65a0542_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:59bc241a2a06804393a63785eeb8f0a8165a99263f08e0ffc3e727671c214114_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:af26444b2b45eb9c726b8d0cc92f023c4f4e52c9fb839198ad862d6513e2683f_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0a189209a84ceddfbbfdba58e43fe94b5ddd211982a58a0929eb9997d3bf585a_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2d8b7f64fa620bfce0130c52b977942ec9118fafddc9c090994609ab274df00c_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a18b4c58e2b285058541b77a47d6482a9db6be58756651df3b3c648548a44f8e_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cebcaaef5272faa6e6f147eeb966803b7cb3d3fbc86514132f6ad2e8b51e4557_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:64c957565dd799994cab0828a9c1169c128ca20e8b103af6b6ac2f422077e322_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8c8aa38871ee6d945a186d0e3a7b129bafd08d53e52278e1eb6d8011491240dd_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a473e11982fd3d970a3e28d7e103ee40fd50217cb0de7028edfae345c34bcbc0_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:ccf2448519c0998d9843fa570f128f420326e849c8c69dd3c5b526c3444d9f50_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7bda73fcb94b412a8799bd11915066b07ed341fed2cd0ab81776f4c601926b54_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:992588aab0cfe3ec909418e827ca46828d0a07d9e3e1479fed437c9c445d7ff0_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:a80038bcbb994457fda1443b37dee5fbe66bbb02972b38139a9877e978c73835_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cf2318bcce1f1a565bcfdb722d89e0ddb2e88a523db237e926def3934add78e5_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:24c95ad401a653c88d072a7753052850cfa6738686ce9aec7ba5f6fcbc92e7fc_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:189d8de6e11f86cd47891d2268c2a91134a6fe617ecbbc433dda7a7f68519421_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:61007260c34ec5113e4286f679a5377c64fb6ad934aee5de6928f4c06c54e969_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:779614a189b230b5c78cd28e360d9e7fabb519aef73a5acacb26b3c26716c68d_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:898bf1c9ee31508ffb2d72deaa97f0b02639e22063788448bbe55f5b98d8db7b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a2acfdea8fb6b49a6117d8914e9ae56bc4668ce882131a47923fc0c7ab7c6b6_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:37415ef53ed46fcc1fd8010da38f13ffc9015f8435306b7dcf16bb3ed117083b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:626527f0b4701d00b845c8bca201f81756a0577a555447ea90b8903b0f968e12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:98ad870b2929bc5db27a7cf0f9f0791f82d6889673ce7d102838616c466af612_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:2d1e27a8dc06bc78b251796816e89ff0ad7ee91ccd9077db47d245fb5ae5d291_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:c472058fc730b6ea6d064cd77dfa583340976209afe109fee9296012f02df66f_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d3ca3c7f85c104a6ae087dccd37e328e1cdeb5b93a880b48e1f2c99c015fd101_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:fa3f9534ea19d8828c2342b3557f652196aec37552fa49e83af6dd1b0c356d69_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:7bfbb56d32556a602f9bbe422ea0a583e7e79e0de7503ce362962b3ffc5e5d62_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:aef0c6d237fba5ce37a219b78da4e7c566c6de1d37a9fcd0529c514322f09e77_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2361437d1f6d5ee61b23867ea903668f611f76cc76142713785b2faa00fcd63_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fecc167995f30887629cd176971af5f7b3cb1cc377f8e3a329008e83133e8361_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4570de210e87e6d64af57fe4ecb072e732365e62e7a23c3b1a8c04cf508bc876_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6d070525b6e7b75f61f2999dac4dbcbc6fda96c882a17978e7bf8edbc008847b_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:92ee83df52ef773c4bcad66c277f608832de60b2bd00adb41fb877e33040077b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:be7f5c4ca3cbba8944f0c275ccf847b701c6ae7a25052272fb80d8144f61fc9c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:36651
Vulnerability from csaf_redhat - Published: 2026-07-08 10:08 - Updated: 2026-08-24 19:11Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.0.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
References
204 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.0.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36651",
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36651.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update",
"tracking": {
"current_release_date": "2026-08-24T19:11:25+00:00",
"generator": {
"date": "2026-08-24T19:11:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36651",
"initial_release_date": "2026-07-08T10:08:44+00:00",
"revision_history": [
{
"date": "2026-07-08T10:08:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T19:11:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.0",
"product": {
"name": "Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3A7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1783502465"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3A5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1783502025"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3A3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1783502494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1783502401"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1783502403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Ab0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1783502023"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3Af1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1783502438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3A5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1783502765"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3Aceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1783502029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1783502445"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Abb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3Ae4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1783502465"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3Afb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1783502025"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Ac9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1783502494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1783502401"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1783502403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3A0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3Aaba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1783502023"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3Ae75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1783502438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3Ae8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1783502765"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1783502029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1783502445"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:36776
Vulnerability from csaf_redhat - Published: 2026-07-08 16:32 - Updated: 2026-08-24 11:57Summary
Red Hat Security Advisory: rhc security update
Severity
Important
Notes
Topic: An update for rhc is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.
Security Fix(es):
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhc is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.\n\nSecurity Fix(es):\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36776",
"url": "https://access.redhat.com/errata/RHSA-2026:36776"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36776.json"
}
],
"title": "Red Hat Security Advisory: rhc security update",
"tracking": {
"current_release_date": "2026-08-24T11:57:37+00:00",
"generator": {
"date": "2026-08-24T11:57:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36776",
"initial_release_date": "2026-07-08T16:32:14+00:00",
"revision_history": [
{
"date": "2026-07-08T16:32:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-08T16:32:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T11:57:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-8.el8_10.ppc64le",
"product": {
"name": "rhc-1:0.2.5-8.el8_10.ppc64le",
"product_id": "rhc-1:0.2.5-8.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-8.el8_10?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"product": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"product_id": "rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-8.el8_10?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"product": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"product_id": "rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-8.el8_10?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-8.el8_10.x86_64",
"product": {
"name": "rhc-1:0.2.5-8.el8_10.x86_64",
"product_id": "rhc-1:0.2.5-8.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-8.el8_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-8.el8_10.x86_64",
"product": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.x86_64",
"product_id": "rhc-debugsource-1:0.2.5-8.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-8.el8_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"product": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"product_id": "rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-8.el8_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-8.el8_10.s390x",
"product": {
"name": "rhc-1:0.2.5-8.el8_10.s390x",
"product_id": "rhc-1:0.2.5-8.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-8.el8_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"product": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"product_id": "rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-8.el8_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"product": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"product_id": "rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-8.el8_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-8.el8_10.src",
"product": {
"name": "rhc-1:0.2.5-8.el8_10.src",
"product_id": "rhc-1:0.2.5-8.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-8.el8_10?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-8.el8_10.aarch64",
"product": {
"name": "rhc-1:0.2.5-8.el8_10.aarch64",
"product_id": "rhc-1:0.2.5-8.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-8.el8_10?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"product": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"product_id": "rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-8.el8_10?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"product": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"product_id": "rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-8.el8_10?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-8.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.aarch64"
},
"product_reference": "rhc-1:0.2.5-8.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-8.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.ppc64le"
},
"product_reference": "rhc-1:0.2.5-8.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-8.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.s390x"
},
"product_reference": "rhc-1:0.2.5-8.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-8.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.src"
},
"product_reference": "rhc-1:0.2.5-8.el8_10.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-8.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.x86_64"
},
"product_reference": "rhc-1:0.2.5-8.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.aarch64"
},
"product_reference": "rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le"
},
"product_reference": "rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.s390x"
},
"product_reference": "rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-8.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.x86_64"
},
"product_reference": "rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.aarch64"
},
"product_reference": "rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.ppc64le"
},
"product_reference": "rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.s390x"
},
"product_reference": "rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-8.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.x86_64"
},
"product_reference": "rhc-debugsource-1:0.2.5-8.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T16:32:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36776"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-8.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-8.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…